apply_relocations in readelf.c in GNU Binutils 2.32 contains an integer overflow that allows attackers to trigger a write access violation (in byte_put_little_endian function in elfcomm.c) via an ELF file, as demonstrated by readelf.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade binutils | Jul 30, 2024 | Jul 30, 2019 |
| Gentoo Linux | — | Upgrade sys-devel/binutils. | Jul 28, 2020 | Jul 30, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade binutilsUpgrade binutils-devel | Nov 3, 2020 | Jul 30, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade binutilsUpgrade binutils-devel | Sep 28, 2020 | Jul 30, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade binutilsUpgrade binutils-devel | Jun 3, 2020 | Jul 30, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade binutilsUpgrade binutils-devel | Nov 19, 2019 | Jul 30, 2019 |
| Suse | — | Upgrade cross-ppc64-binutilsUpgrade cross-s390-binutilsUpgrade libctf-nobfd0Upgrade cross-aarch64-binutilsUpgrade libctf0Upgrade cross-s390x-binutilsUpgrade binutilsUpgrade cross-ia64-binutilsUpgrade cross-mips-binutilsUpgrade cross-hppa64-binutilsUpgrade cross-arm-binutilsUpgrade cross-hppa-binutilsUpgrade cross-avr-binutilsUpgrade binutils-goldUpgrade binutils-devel-32bitUpgrade cross-sparc64-binutilsUpgrade cross-ppc64le-binutilsUpgrade cross-spu-binutilsUpgrade cross-i386-binutilsUpgrade cross-m68k-binutilsUpgrade cross-xtensa-binutilsUpgrade cross-sparc-binutilsUpgrade cross-epiphany-binutilsUpgrade cross-riscv64-binutilsUpgrade cross-ppc-binutilsUpgrade binutils-develUpgrade cross-rx-binutils | Nov 4, 2020 | Jul 30, 2019 |
| Ubuntu | — | Upgrade binutilsUpgrade binutils-multiarch (Ubuntu Pro)Upgrade binutils (Ubuntu Pro)Upgrade binutils-multiarch | Apr 23, 2020 | Jul 30, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 30, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub